pi-ansible/roles/docker_services/tasks/services.yml

# vim: ft=yaml.ansible
---
- name: Copy Docker daemon config file
  ansible.builtin.template:
    src: daemon.json.j2
    dest: /etc/docker/daemon.json
    owner: root
    mode: u=rw,g=r,o=r
  register: daemon_config

- name: Disable and (re)start Docker daemon
  ansible.builtin.service:
    name: "{{ item }}"
    enabled: false
    state: "{{ 'restarted' if daemon_config.changed else 'started' }}"
  loop:
    - docker.socket
    - docker.service

- name: Create base directory for Docker volumes
  ansible.builtin.file:
    name: "{{ base_volume }}"
    owner: root
    mode: u=rwx,g=rx,o=rx
    state: directory

- name: Create Docker network for services
  community.docker.docker_network:
    name: services
    ipam_config:
      - subnet: 172.16.0.0/16
        gateway: 172.16.0.1
    state: present

- name: Deploy services
  ansible.builtin.include_tasks: services/{{ item.key }}.yml
  loop: "{{ services | dict2items }}"
  when: single_service is not defined

- name: Deploy single service
  ansible.builtin.include_tasks: services/{{ single_service }}.yml
  when: single_service is defined and
        single_service in services